CVE-2026-62647: Improper Input Validation

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A random number generator is used to generate security-relevant values such as session identifiers used for authentication purposes that is not initialized with a True Random Number Generator TRNG, resulting in a predictable...

NewStart CGSL MAIN 7.02 : bind Multiple Vulnerabilities (NS-SA-2026-0110)

The remote NewStart CGSL host, running version MAIN 7.02, has bind packages installed that are affected by multiple vulnerabilities: - Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

CVE-2026-86187

WWBN AVideo is vulnerable to password recovery via weak PRNG in its external-login account creation process. Passwords are generated using rand() rather than a cryptographically secure generator, yielding only 31-bit integers that are further weakened by unsalted MD5 hashing. An attacker with acc...

CVE-2026-86187 WWBN AVideo Weak PRNG Password Generation via External Login

WWBN AVideo generates passwords for external-login accounts using rand instead of a cryptographic generator, producing only 31-bit integers. Attackers with access to password hashes can recover plaintext passwords in minutes through offline brute-force attacks due to unsalted MD5-based hashing...

Security Bulletin: Vulnerability in Netty's DnsResolveContext affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Netty's DnsResolveContext has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional...

CVE-2026-3416

The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...

CVE-2026-3416 Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads

The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...

CVE-2026-3416

WSO2 products' API Publisher component used a non-cryptographic pseudorandom number generator (PRNG) to generate shared secrets for Webhook HMAC validation. Because the PRNG lacks sufficient entropy, a sophisticated attacker can predict future secrets and forge event payloads with valid HMAC sign...

CVE-2026-3416 Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads

The API Publisher component previously used a non-cryptographic pseudorandom number generator PRNG to create shared secrets for Webhook HMAC validation. This PRNG lacks sufficient entropy for security-sensitive operations, allowing a sophisticated attacker to predict future secrets. This enables...

PT-2026-85015

Name of the Vulnerable Software and Affected Versions API Publisher affected versions not specified Description The API Publisher component used a non-cryptographic pseudorandom number generator PRNG—a sequence of numbers that appears random but is determined by a mathematical formula—to create...

librest: weak random number generation in PKCE implementation

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

TencentOS Server 3: python-urwid (TSSA-2026:0932)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0932 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Security update for librest (moderate)

openSUSE security update: security update for librest ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21694-1 Rating: moderate References: bsc1272399 Cross-References: CVE-2026-16615 CVSS scores: CVE-2026-16615 SUSE : 6.8...

OPENSUSE-SU-2026:21694-1 Security update for librest

This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

Security update for librest0_7

This update for librest07 fixes the following issue: CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3834-1 Security update for librest0_7

This update for librest07 fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

SUSE SLED15 / SLES15 Security Update : librest (SUSE-SU-2026:3795-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3795-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a...